last executing test programs: 2m50.146679696s ago: executing program 32 (id=78): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 2m39.403428986s ago: executing program 33 (id=262): munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$'], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) 2m30.152269913s ago: executing program 34 (id=433): r0 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 2m9.069362047s ago: executing program 35 (id=804): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x200000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000002080)='io\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 2m6.638171864s ago: executing program 36 (id=834): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x0, 0x11ff, &(0x7f0000002480)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19}, 0x94) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x58) 2m4.606970366s ago: executing program 37 (id=848): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x42, 0x0, 0x1}, 0x28) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8010, &(0x7f0000000180), 0x5, 0x565, &(0x7f0000000600)="$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") fstat(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) listen(0xffffffffffffffff, 0x7) 1m55.15687968s ago: executing program 38 (id=945): socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1m48.44174012s ago: executing program 2 (id=1016): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000001080)={0x0, 0xf, &(0x7f00000010c0)=[@in6={0xa, 0x4e24, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0x9, @mcast2, 0xfddd}, @in6={0xa, 0x4e20, 0x2, @private1, 0x4071}]}, &(0x7f00000002c0)=0x10) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000240)={{0x2, 0x4e23, @empty}, {}, 0xc, {0x2, 0x4e22, @empty}, 'lo\x00'}) 1m48.381870675s ago: executing program 2 (id=1020): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r0, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1m48.271099656s ago: executing program 2 (id=1023): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0x1, 0x2d0, &(0x7f00000004c0)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x12) 1m47.791782418s ago: executing program 2 (id=1038): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x38000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) r3 = accept4$x25(r2, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000180)=0x12, 0x800) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0xd0754000) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x80000}]) 1m46.757837301s ago: executing program 2 (id=1046): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) io_setup(0x81, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1m46.355277237s ago: executing program 2 (id=1053): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa1, 0x208000, 0x12345}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m46.354972896s ago: executing program 39 (id=1053): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa1, 0x208000, 0x12345}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m37.553918083s ago: executing program 9 (id=1152): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r3, 0x6}, &(0x7f0000000080)=0xc) 1m37.499516708s ago: executing program 9 (id=1154): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) 1m37.36808235s ago: executing program 9 (id=1157): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x40) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) 1m37.268159379s ago: executing program 9 (id=1162): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x24020400) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x89901) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) 1m37.184742616s ago: executing program 9 (id=1165): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendto$inet(r0, &(0x7f0000000180)="8995b3c271bfb84f6e861cd28301f2e02519276836b2ab14baa6df71dc54faabe6ccc2dae1fdf17d4c74618af0933c8c800ec3ce60bd4af9b8cf0b15eab7ab7a92eb2bad756f12238f6649d204a1065dad7cffef082a59ee2b8735d83669614e4eb5b9be7e4e76b2bb0c", 0xffffffffffffff55, 0x4040, 0x0, 0x0) 1m37.063429827s ago: executing program 9 (id=1167): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x48}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944ba9d7f"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xfc5, 0x2db0, 0xffffffff, 0x3bd7, 0x7, "7f5972d49b67f3661c0196fe1d42c5d7cf38f6"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) 1m37.059499147s ago: executing program 40 (id=1167): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x48}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944ba9d7f"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xfc5, 0x2db0, 0xffffffff, 0x3bd7, 0x7, "7f5972d49b67f3661c0196fe1d42c5d7cf38f6"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) 1m24.774533195s ago: executing program 1 (id=1385): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x0, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x2b8, 0xffffffff, 0xffffffff, 0x2b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xff000000], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {'\x00', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f000700000000000a"], 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000360000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r4, 0x29, 0xce, &(0x7f0000000000), &(0x7f0000000100)=0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000005c0), 0x0}, 0x20) 1m24.705337181s ago: executing program 1 (id=1386): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 1m24.282337179s ago: executing program 1 (id=1394): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x1d, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc79", 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r1, &(0x7f0000000000), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r2, &(0x7f00000001c0), 0x10) dup3(r0, r1, 0x0) 1m24.198070527s ago: executing program 1 (id=1396): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001300)={0x0, 0xfe9, "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"}, &(0x7f0000000280)=0xff1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4, 0x8], 0x0, 0x0, 0x12, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x10012, r0, 0x0) 1m24.143762921s ago: executing program 1 (id=1397): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x255012, 0x0) 1m24.119081674s ago: executing program 1 (id=1401): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x2, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@mblk_io_submit}, {@mblk_io_submit}, {@commit}, {@max_batch_time={'max_batch_time', 0x3d, 0x428}}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1m9.067283229s ago: executing program 41 (id=1401): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x2, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@mblk_io_submit}, {@mblk_io_submit}, {@commit}, {@max_batch_time={'max_batch_time', 0x3d, 0x428}}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 55.50946628s ago: executing program 6 (id=1808): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x80, 0x8) write$tun(r1, &(0x7f00000033c0)=ANY=[], 0x107c) 54.623763989s ago: executing program 6 (id=1827): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x102) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x1400037e) lseek(r2, 0x103, 0x1) getdents(r2, 0x0, 0x58) 54.552923785s ago: executing program 6 (id=1828): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 54.014328454s ago: executing program 6 (id=1843): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='.\x00', 0x2}], 0x1}, 0x80054) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000700)='./file0/../file0\x00', 0x0, 0x225451, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x131, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 53.968897588s ago: executing program 6 (id=1834): r0 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000010"], 0xfc}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 52.725972199s ago: executing program 6 (id=1840): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000480)={0x10000018}) r2 = socket$netlink(0x10, 0x3, 0x4) epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x9450) epoll_wait(r1, &(0x7f0000000300)=[{}], 0x1, 0x7ffffffd) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 52.725813439s ago: executing program 42 (id=1840): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000480)={0x10000018}) r2 = socket$netlink(0x10, 0x3, 0x4) epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x9450) epoll_wait(r1, &(0x7f0000000300)=[{}], 0x1, 0x7ffffffd) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 51.695775021s ago: executing program 4 (id=1858): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x8001, 0x4080) ioctl$BLKGETNRZONES(r1, 0x80041285, 0x0) r2 = syz_clone(0x2180, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000980)='smaps\x00') pread64(r3, &(0x7f0000000500)=""/31, 0x1f, 0x9) 51.648336405s ago: executing program 4 (id=1860): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x5}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$tipc(0x1e, 0x2, 0x0) r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2e, 0x4608, @void}, 0x10) kexec_load(0xfffffffffffffffc, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r2, 0x4) 51.572241092s ago: executing program 4 (id=1862): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xe0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000b00)={[{@user_xattr}, {@nodioread_nolock}, {@nodelalloc}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x1, 0x7e5a, 0x1001f0) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) pwritev2(r1, &(0x7f0000000180)=[{&(0x7f0000000200)="05", 0x5b2000000000000}], 0x1, 0x7, 0x0, 0x15) 51.351114662s ago: executing program 4 (id=1863): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='.\x00', 0x2}], 0x1}, 0x80054) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000700)='./file0/../file0\x00', 0x0, 0x225451, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x131, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 50.671722473s ago: executing program 4 (id=1867): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 50.59135896s ago: executing program 4 (id=1868): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8800) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000bc7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000707000/0x4000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x11, 0x80803, 0x0) setsockopt(r2, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) 50.59110944s ago: executing program 43 (id=1868): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8800) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000bc7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000707000/0x4000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x11, 0x80803, 0x0) setsockopt(r2, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) 6.861318727s ago: executing program 5 (id=2318): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003100000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x12030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x13240, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b1109000000000095"], 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) 6.741464778s ago: executing program 5 (id=2321): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, 0x0, 0x0) ioctl$XFS_IOC_SWAPEXT(r2, 0xc0c0586d, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 4.284204917s ago: executing program 7 (id=2350): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000040)=0xfffffffa, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xc, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x130, 0x98, 0xffffffff, 0x1c8, 0x98, 0x1c8, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.190212926s ago: executing program 7 (id=2351): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast1, {[@cipso={0x86, 0x2a, 0x3, [{0x2, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @multicast2]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x1000000) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x1, 0x47d, &(0x7f0000000200)="$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") 3.668902932s ago: executing program 7 (id=2354): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000000)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 3.611344627s ago: executing program 0 (id=2355): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x7, 0x4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r5, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6fc}}, 0x40) syz_emit_ethernet(0x1514, &(0x7f0000001c80)=ANY=[], 0x0) 3.598109398s ago: executing program 7 (id=2356): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.584879149s ago: executing program 5 (id=2358): r0 = syz_io_uring_setup(0x110c, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x84}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000"], 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.582698479s ago: executing program 0 (id=2367): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) close(r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000700000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) 2.582564639s ago: executing program 7 (id=2360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.534129173s ago: executing program 0 (id=2361): socket$nl_route(0x10, 0x3, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r0, 0x0, 0x0, 0x5, 0x6) read$qrtrtun(0xffffffffffffffff, &(0x7f0000001ac0)=""/248, 0xf8) r1 = syz_io_uring_setup(0x49c, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0x3, 0x40224e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x6, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x0, 0x1}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x20010, r1, 0x80d27000) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 2.321236073s ago: executing program 8 (id=2362): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, 0x0, 0x0, 0x20000805}, 0x20000880) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7cfb, &(0x7f0000000040)={0x0, 0x36c, 0xc000, 0x0, 0xbe}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}}], 0x2, 0x44080) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.970428774s ago: executing program 8 (id=2363): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) 1.879383432s ago: executing program 0 (id=2364): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xe, 0x9, 0x5, 0x10, 0x7de, 0x74, 0xe, 0xdc}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) 1.261394837s ago: executing program 0 (id=2365): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast1, {[@cipso={0x86, 0x2a, 0x3, [{0x2, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @multicast2]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x1000000) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x1, 0x47d, &(0x7f0000000200)="$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") 1.261215937s ago: executing program 3 (id=2366): setfsgid(0xee00) r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) getdents64(r3, 0x0, 0x0) 1.261130557s ago: executing program 8 (id=2368): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r1, 0x3) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0xde20, @empty}, 0x10) listen(r2, 0x3) 1.223695351s ago: executing program 8 (id=2369): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) open_tree(0xffffffffffffff9c, 0x0, 0x89001) socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x80081272, 0xfffffffffffffffe) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x18, r3, 0x1, 0x4070bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x4800) 1.1201953s ago: executing program 8 (id=2370): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 1.074236984s ago: executing program 0 (id=2371): socket(0x10, 0x80002, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x850}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r2, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) 843.183575ms ago: executing program 7 (id=2372): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@local, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x40000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 736.981644ms ago: executing program 5 (id=2373): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x4, 0xc}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) 649.682062ms ago: executing program 5 (id=2374): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0xc0189436, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) close(r2) 425.347742ms ago: executing program 5 (id=2375): openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 353.208538ms ago: executing program 3 (id=2376): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[], 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x110010, 0x2, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 278.744075ms ago: executing program 3 (id=2377): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x2c}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x25) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) 211.199691ms ago: executing program 3 (id=2378): r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x51) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 140.177857ms ago: executing program 3 (id=2379): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xe, 0x9, 0x5, 0x10, 0x7de, 0x74, 0xe, 0xdc}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) 32.667997ms ago: executing program 3 (id=2380): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x401, 0x0, 0x11000, 0x0, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x1, 0x0, 0x2}}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) 0s ago: executing program 8 (id=2381): socket$inet(0xa, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x1fb}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): an up link [ 105.413187][ T7719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.452194][ T7819] netlink: 'syz.6.1195': attribute type 4 has an invalid length. [ 105.481017][ T7819] netlink: 'syz.6.1195': attribute type 4 has an invalid length. [ 105.482866][ T7719] team0: Port device team_slave_0 added [ 105.505154][ T7719] team0: Port device team_slave_1 added [ 105.564618][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.587030][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.621385][ T7833] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 105.630386][ T7719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.655457][ T7837] netlink: 'syz.6.1198': attribute type 22 has an invalid length. [ 105.663587][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1198'. [ 105.674430][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.681478][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.692812][ T7844] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1200'. [ 105.715638][ T7719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.747701][ T7837] netlink: 'syz.6.1198': attribute type 22 has an invalid length. [ 105.762531][ T41] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.787523][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1198'. [ 105.798940][ T41] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.830375][ T41] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.951293][ T41] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.962577][ T7719] hsr_slave_0: entered promiscuous mode [ 105.974377][ T7719] hsr_slave_1: entered promiscuous mode [ 105.980408][ T7719] debugfs: 'hsr0' already exists in 'hsr' [ 105.986559][ T7719] Cannot create hsr debugfs directory [ 106.061218][ T7890] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 106.150270][ T7719] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.211772][ T7912] bond1: entered promiscuous mode [ 106.222753][ T7912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.244770][ T7719] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.261869][ T7912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.269851][ T7912] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 106.284022][ T7912] bond1: (slave sit1): Error -95 calling set_mac_address [ 106.314047][ T7719] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.395270][ T7719] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.420307][ T7927] loop6: detected capacity change from 0 to 512 [ 106.434968][ T7927] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 106.445768][ T7927] EXT4-fs (loop6): 1 truncate cleaned up [ 106.451934][ T7927] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.503035][ T7719] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.515190][ T7719] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.524999][ T7719] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.536356][ T7719] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.588307][ T7719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.602101][ T7719] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.613170][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.620314][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.630630][ T7175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.645817][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.653023][ T2927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.824847][ T7949] loop1: detected capacity change from 0 to 512 [ 106.846355][ T7949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.870405][ T7949] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.956182][ T7719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.963619][ T6228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.239444][ T7719] veth0_vlan: entered promiscuous mode [ 107.280556][ T7719] veth1_vlan: entered promiscuous mode [ 107.351896][ T7719] veth0_macvtap: entered promiscuous mode [ 107.361049][ T7719] veth1_macvtap: entered promiscuous mode [ 107.375943][ T7719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.388947][ T7719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.406516][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.422235][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.444362][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.455376][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.513659][ T8002] netlink: 'syz.6.1246': attribute type 4 has an invalid length. [ 107.546365][ T8004] loop4: detected capacity change from 0 to 1024 [ 107.557461][ T8002] netlink: 'syz.6.1246': attribute type 4 has an invalid length. [ 107.585309][ T8004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.914581][ T7719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.972461][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 107.972485][ T28] audit: type=1400 audit(1771356189.133:667): avc: denied { mounton } for pid=8013 comm="syz.6.1238" path="/21/file0" dev="cgroup" ino=787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 108.062779][ T28] audit: type=1400 audit(1771356189.173:668): avc: denied { unmount } for pid=7175 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 108.084144][ T28] audit: type=1400 audit(1771356189.193:669): avc: denied { write } for pid=8019 comm="syz.8.1240" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 108.237246][ T28] audit: type=1400 audit(1771356189.403:670): avc: denied { map } for pid=8028 comm="syz.1.1243" path="socket:[22892]" dev="sockfs" ino=22892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.333982][ T8020] __nla_validate_parse: 9 callbacks suppressed [ 108.334001][ T8020] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1240'. [ 108.406890][ T8020] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1240'. [ 108.640662][ T8041] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1248'. [ 108.657938][ T8043] x_tables: unsorted entry at hook 3 [ 108.694969][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1252'. [ 108.717682][ T8046] vlan2: entered promiscuous mode [ 108.729029][ T8046] syz_tun: entered promiscuous mode [ 108.859399][ T8056] loop4: detected capacity change from 0 to 512 [ 108.872228][ T28] audit: type=1400 audit(1771356190.033:671): avc: denied { bind } for pid=8058 comm="syz.1.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.912049][ T8056] EXT4-fs (loop4): 1 truncate cleaned up [ 108.921787][ T8056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.200020][ T28] audit: type=1400 audit(1771356190.363:672): avc: denied { getopt } for pid=8062 comm="syz.1.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 109.471738][ T28] audit: type=1400 audit(1771356190.633:673): avc: denied { bind } for pid=8074 comm="syz.1.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 109.556410][ T8082] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 109.697740][ T8087] loop1: detected capacity change from 0 to 2048 [ 109.729432][ T7719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.732709][ T28] audit: type=1400 audit(1771356190.893:674): avc: denied { write } for pid=8088 comm="syz.6.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 109.800028][ T8087] EXT4-fs: Ignoring removed nobh option [ 109.834841][ T8087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.847918][ T8087] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.868067][ T28] audit: type=1400 audit(1771356191.033:675): avc: denied { execute } for pid=8086 comm="syz.1.1267" path="/92/file0/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 109.912532][ T28] audit: type=1326 audit(1771356191.073:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8104 comm="syz.6.1272" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24e27ac629 code=0x0 [ 109.977430][ T8115] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8115 comm=syz.6.1272 [ 110.007906][ T6228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.747725][ T8129] loop1: detected capacity change from 0 to 512 [ 110.784674][ T8134] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1283'. [ 110.785136][ T8129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.795163][ T8129] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.050748][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1286'. [ 111.073922][ T8144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1286'. [ 111.114791][ T41] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.142505][ T41] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.170022][ T41] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.191580][ T41] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.219215][ T8148] netlink: 'syz.4.1288': attribute type 2 has an invalid length. [ 111.290432][ T41] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 111.312601][ T41] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 111.339138][ T41] EXT4-fs (loop1): This should not happen!! Data will be lost [ 111.339138][ T41] [ 111.359986][ T41] EXT4-fs (loop1): Total free blocks count 0 [ 111.369962][ T41] EXT4-fs (loop1): Free/Dirty block details [ 111.380107][ T41] EXT4-fs (loop1): free_blocks=65280 [ 111.395326][ T8155] netlink: 'syz.6.1292': attribute type 1 has an invalid length. [ 111.397284][ T41] EXT4-fs (loop1): dirty_blocks=8192 [ 111.409099][ T41] EXT4-fs (loop1): Block reservation details [ 111.415710][ T41] EXT4-fs (loop1): i_reserved_data_blocks=8192 [ 111.435449][ T41] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2068 with max blocks 2048 with error 28 [ 111.470834][ T8155] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 111.502101][ T8155] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 111.520732][ T8155] bond1: (slave vxcan3): making interface the new active one [ 111.529038][ T8155] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 111.568845][ T8155] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 111.587231][ T8155] bond1: (slave vxcan5): Enslaving as a backup interface with an up link [ 111.790421][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1297'. [ 111.810569][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1297'. [ 111.837821][ T8189] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 111.904885][ T8196] loop4: detected capacity change from 0 to 512 [ 111.942923][ T8196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.985622][ T8196] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.120837][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1304'. [ 112.764906][ T8267] loop6: detected capacity change from 0 to 512 [ 112.802965][ T8267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.825801][ T8267] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.898600][ T41] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 112.932147][ T41] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 112.950195][ T41] EXT4-fs (loop4): This should not happen!! Data will be lost [ 112.950195][ T41] [ 112.964114][ T41] EXT4-fs (loop4): Total free blocks count 0 [ 112.970219][ T41] EXT4-fs (loop4): Free/Dirty block details [ 112.976415][ T41] EXT4-fs (loop4): free_blocks=65280 [ 112.981801][ T41] EXT4-fs (loop4): dirty_blocks=7516 [ 112.988226][ T41] EXT4-fs (loop4): Block reservation details [ 113.004706][ T7175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.011039][ T41] EXT4-fs (loop4): i_reserved_data_blocks=7516 [ 113.032301][ T41] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2068 with max blocks 2048 with error 28 [ 113.061321][ T8286] loop6: detected capacity change from 0 to 512 [ 113.083015][ T8286] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 113.092661][ T8286] EXT4-fs (loop6): orphan cleanup on readonly fs [ 113.123936][ T8286] __quota_error: 22 callbacks suppressed [ 113.123950][ T8286] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 113.127351][ T8289] bond1: entered promiscuous mode [ 113.131394][ T8286] EXT4-fs warning (device loop6): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 113.152768][ T8289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.166470][ T8286] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 113.182971][ T8286] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #16: comm syz.6.1323: inode has both inline data and extents flags [ 113.196229][ T8286] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 113.196460][ T8286] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1323: couldn't read orphan inode 16 (err -117) [ 113.205644][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 113.205667][ C0] EXT4-fs (loop6): initial error at time 1771356194: ext4_orphan_get:1391: inode 16 [ 113.205714][ C0] EXT4-fs (loop6): last error at time 1771356194: ext4_orphan_get:1391: inode 16 [ 113.211987][ T8289] bridge3: entered promiscuous mode [ 113.256061][ T8286] loop6: lost filesystem error report for type 5 error -117 [ 113.259673][ T8286] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.292165][ T8297] loop4: detected capacity change from 0 to 512 [ 113.323259][ T8297] EXT4-fs: Ignoring removed oldalloc option [ 113.340254][ T2927] Bluetooth: hci0: Frame reassembly failed (-84) [ 113.358851][ T8297] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1322: Parent and EA inode have the same ino 15 [ 113.371320][ T8297] loop4: lost filesystem error report for type 5 error -117 [ 113.372359][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 113.384512][ T8297] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 113.386074][ C0] EXT4-fs (loop4): initial error at time 1771356194: ext4_xattr_inode_iget:437 [ 113.407944][ C0] EXT4-fs (loop4): last error at time 1771356194: ext4_xattr_inode_iget:437 [ 113.414949][ T8304] __nla_validate_parse: 2 callbacks suppressed [ 113.414964][ T8304] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1328'. [ 113.432232][ T8297] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1322: Parent and EA inode have the same ino 15 [ 113.444800][ T8297] loop4: lost filesystem error report for type 5 error -117 [ 113.445453][ T8297] EXT4-fs (loop4): 1 orphan inode deleted [ 113.468040][ T8297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.519640][ T7719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.601416][ T8321] loop8: detected capacity change from 0 to 512 [ 113.627877][ T8321] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 113.737822][ T7175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.784231][ T8332] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.791580][ T8332] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.823907][ T28] audit: type=1326 audit(1771356194.993:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8334 comm="syz.8.1336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f179483c629 code=0x0 [ 114.120988][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1338'. [ 114.209576][ T8354] loop6: detected capacity change from 0 to 512 [ 114.226365][ T8354] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.267265][ T7175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.293707][ T28] audit: type=1400 audit(1771356195.453:700): avc: denied { read } for pid=8356 comm="syz.6.1344" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 114.317240][ T28] audit: type=1400 audit(1771356195.453:701): avc: denied { open } for pid=8356 comm="syz.6.1344" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 114.334579][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1344'. [ 114.431036][ T8363] loop6: detected capacity change from 0 to 1024 [ 114.444320][ T8363] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 114.456679][ T8363] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.831542][ T8366] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1347: bg 0: block 112: padding at end of block bitmap is not set [ 114.857484][ T8366] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 117 [ 114.882054][ T8366] EXT4-fs (loop6): This should not happen!! Data will be lost [ 114.882054][ T8366] [ 114.990944][ T8385] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 115.031594][ T8393] loop4: detected capacity change from 0 to 512 [ 115.066632][ T8393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.092177][ T8393] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.135271][ T7719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.412413][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 115.413793][ T3531] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 115.531877][ T50] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2088 with max blocks 2048 with error 28 [ 115.550584][ T8418] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1370'. [ 115.557442][ T50] EXT4-fs (loop6): This should not happen!! Data will be lost [ 115.557442][ T50] [ 115.569764][ T50] EXT4-fs (loop6): Total free blocks count 0 [ 115.576766][ T50] EXT4-fs (loop6): Free/Dirty block details [ 115.583932][ T50] EXT4-fs (loop6): free_blocks=0 [ 115.588900][ T50] EXT4-fs (loop6): dirty_blocks=14352 [ 115.601452][ T50] EXT4-fs (loop6): Block reservation details [ 115.887562][ T8433] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1377'. [ 116.124166][ T3646] IPVS: starting estimator thread 0... [ 116.252415][ T8440] IPVS: using max 2448 ests per chain, 122400 per kthread [ 116.501729][ T8475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1386'. [ 116.762132][ T8492] loop4: detected capacity change from 0 to 512 [ 116.817130][ T8492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.837996][ T8492] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.039988][ T28] audit: type=1400 audit(1771356198.203:702): avc: denied { unmount } for pid=6228 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 117.204074][ T7719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.354521][ T8521] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1405'. [ 117.534561][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1409'. [ 117.842329][ T8562] loop6: detected capacity change from 0 to 512 [ 117.884135][ T8562] EXT4-fs: Ignoring removed oldalloc option [ 117.894274][ T8565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1413'. [ 117.948949][ T8562] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.1411: Parent and EA inode have the same ino 15 [ 118.034317][ T8562] loop6: lost filesystem error report for type 5 error -117 [ 118.038399][ T8562] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.1411: Parent and EA inode have the same ino 15 [ 118.045748][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 118.045771][ C1] EXT4-fs (loop6): initial error at time 1771356199: ext4_xattr_inode_iget:437 [ 118.045816][ C1] EXT4-fs (loop6): last error at time 1771356199: ext4_xattr_inode_iget:437 [ 118.087349][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'. [ 118.152507][ T28] audit: type=1400 audit(1771356199.313:703): avc: denied { setattr } for pid=8570 comm="syz.0.1414" name="NETLINK" dev="sockfs" ino=24475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.179236][ T8562] loop6: lost filesystem error report for type 5 error -117 [ 118.182551][ T8571] net_ratelimit: 11 callbacks suppressed [ 118.182568][ T8571] openvswitch: netlink: Port -3 exceeds max allowable 65535 [ 118.203052][ T8562] EXT4-fs (loop6): 1 orphan inode deleted [ 118.209121][ T8562] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.324351][ T7175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.207619][ T28] audit: type=1400 audit(1771356201.373:704): avc: denied { getopt } for pid=8622 comm="syz.0.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.524653][ T8639] loop8: detected capacity change from 0 to 2048 [ 121.180848][ T8667] netlink: 'syz.4.1450': attribute type 4 has an invalid length. [ 121.220498][ T28] audit: type=1400 audit(1771356202.383:705): avc: denied { connect } for pid=8671 comm="syz.4.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 121.393912][ T8692] loop6: detected capacity change from 0 to 256 [ 121.411307][ T8692] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 121.441495][ T8692] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.542166][ T8700] loop4: detected capacity change from 0 to 512 [ 121.576633][ T8700] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 121.585087][ T8700] EXT4-fs (loop4): orphan cleanup on readonly fs [ 121.604338][ T8700] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 121.632482][ T8700] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 121.714740][ T8700] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 121.747324][ T8700] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.1449: inode has both inline data and extents flags [ 121.772642][ T8700] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 121.782380][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 121.798516][ C1] EXT4-fs (loop4): initial error at time 1771356202: ext4_orphan_get:1391: inode 16 [ 121.808448][ C1] EXT4-fs (loop4): last error at time 1771356202: ext4_orphan_get:1391: inode 16 [ 121.820954][ T8700] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1449: couldn't read orphan inode 16 (err -117) [ 121.832952][ T8700] loop4: lost filesystem error report for type 5 error -117 [ 121.835073][ T8700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.185103][ T8716] sit3: entered promiscuous mode [ 122.624747][ T7719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.687123][ T8730] __nla_validate_parse: 2 callbacks suppressed [ 122.687139][ T8730] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1467'. [ 122.715870][ T28] audit: type=1400 audit(1771356203.883:706): avc: denied { read } for pid=8731 comm="syz.4.1458" name="event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 123.242762][ T8733] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 123.249297][ T8733] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 123.279375][ T8733] vhci_hcd vhci_hcd.0: Device attached [ 123.303646][ T8734] vhci_hcd: connection closed [ 123.303898][ T70] vhci_hcd vhci_hcd.4: stop threads [ 123.331843][ T70] vhci_hcd vhci_hcd.4: release socket [ 123.347002][ T70] vhci_hcd vhci_hcd.4: disconnect device [ 123.751903][ T8747] loop6: detected capacity change from 0 to 512 [ 123.788051][ T28] audit: type=1326 audit(1771356204.953:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.0.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833075c629 code=0x7ffc0000 [ 123.823730][ T8747] EXT4-fs (loop6): 1 truncate cleaned up [ 123.830285][ T28] audit: type=1326 audit(1771356204.953:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.0.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833075c629 code=0x7ffc0000 [ 123.853838][ T28] audit: type=1326 audit(1771356204.953:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.0.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833075c629 code=0x7ffc0000 [ 123.866803][ T8747] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.877186][ T28] audit: type=1326 audit(1771356204.953:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.0.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f833075c629 code=0x7ffc0000 [ 123.877232][ T28] audit: type=1326 audit(1771356204.953:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.0.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833075c629 code=0x7ffc0000 [ 123.877252][ T28] audit: type=1326 audit(1771356204.953:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.0.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833075c629 code=0x7ffc0000 [ 123.877322][ T28] audit: type=1326 audit(1771356204.953:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.0.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833075c629 code=0x7ffc0000 [ 123.877344][ T28] audit: type=1326 audit(1771356204.953:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.0.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833075c629 code=0x7ffc0000 [ 123.877368][ T28] audit: type=1326 audit(1771356204.953:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.0.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f833075c629 code=0x7ffc0000 [ 124.032031][ T28] audit: type=1326 audit(1771356204.953:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.0.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833075c629 code=0x7ffc0000 [ 124.547930][ T7175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.699706][ T8793] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1484'. [ 125.110537][ T8811] loop8: detected capacity change from 0 to 512 [ 125.156158][ T8811] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 125.184879][ T8811] EXT4-fs (loop8): orphan cleanup on readonly fs [ 125.191523][ T8811] EXT4-fs warning (device loop8): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 125.207474][ T8811] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 125.218564][ T8811] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #16: comm syz.8.1489: inode has both inline data and extents flags [ 125.232287][ T8811] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 125.238463][ T8811] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1489: couldn't read orphan inode 16 (err -117) [ 125.247643][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 125.247676][ C0] EXT4-fs (loop8): initial error at time 1771356206: ext4_orphan_get:1391: inode 16 [ 125.247710][ C0] EXT4-fs (loop8): last error at time 1771356206: ext4_orphan_get:1391: inode 16 [ 125.284696][ T8811] loop8: lost filesystem error report for type 5 error -117 [ 125.292875][ T8811] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.468486][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1496'. [ 125.500488][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1496'. [ 125.628755][ T8836] netlink: 'syz.6.1498': attribute type 1 has an invalid length. [ 125.752649][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'. [ 125.893092][ T6062] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.932576][ T8857] sctp: [Deprecated]: syz.4.1510 (pid 8857) Use of int in max_burst socket option. [ 125.932576][ T8857] Use struct sctp_assoc_value instead [ 126.087074][ T8861] loop8: detected capacity change from 0 to 512 [ 126.165098][ T8861] EXT4-fs (loop8): 1 truncate cleaned up [ 126.179299][ T8861] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.921066][ T6062] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.944899][ T8879] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1515'. [ 127.295095][ T8896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1522'. [ 127.347115][ T8896] 8021q: adding VLAN 0 to HW filter on device bond3 [ 127.375887][ T8899] bond3: (slave macvlan3): Opening slave failed [ 128.221875][ T8929] all: renamed from bridge_slave_1 (while UP) [ 128.284248][ T8931] SELinux: failed to load policy [ 128.514539][ T8951] loop4: detected capacity change from 0 to 512 [ 128.531236][ T8951] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 128.571622][ T8951] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1543: bg 0: block 393: padding at end of block bitmap is not set [ 128.586341][ T8951] loop4: lost filesystem error report for type 5 error -117 [ 128.586611][ T8951] EXT4-fs (loop4): Remounting filesystem read-only [ 128.593926][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 128.593960][ C0] EXT4-fs (loop4): initial error at time 1771356209: ext4_validate_block_bitmap:441 [ 128.593988][ C0] EXT4-fs (loop4): last error at time 1771356209: ext4_validate_block_bitmap:441 [ 128.626002][ T8951] EXT4-fs (loop4): 2 truncates cleaned up [ 128.632874][ T8951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.722690][ T7719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.798098][ T8969] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1550'. [ 128.832481][ T8971] netlink: 'syz.4.1552': attribute type 4 has an invalid length. [ 128.840384][ T8971] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1552'. [ 128.854328][ T8971] .`: renamed from bond0 (while UP) [ 128.930383][ T8978] raw_sendmsg: syz.6.1555 forgot to set AF_INET. Fix it! [ 129.219827][ T70] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.265233][ T70] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.266103][ T8991] xt_hashlimit: size too large, truncated to 1048576 [ 129.325144][ T70] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.414773][ T70] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.438983][ T8992] xt_hashlimit: size too large, truncated to 1048576 [ 129.531799][ T70] bridge_slave_1: left allmulticast mode [ 129.545295][ T70] bridge_slave_1: left promiscuous mode [ 129.557553][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.613775][ T70] bridge_slave_0: left allmulticast mode [ 129.619632][ T70] bridge_slave_0: left promiscuous mode [ 129.635178][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.713881][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1563'. [ 129.999049][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.023399][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.033446][ T70] bond0 (unregistering): Released all slaves [ 130.049075][ T9025] loop6: detected capacity change from 0 to 128 [ 130.057408][ T70] bond1 (unregistering): Released all slaves [ 130.099384][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1565'. [ 130.109398][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1565'. [ 130.122879][ T70] tipc: Left network mode [ 130.201438][ T70] hsr_slave_0: left promiscuous mode [ 130.231595][ T70] hsr_slave_1: left promiscuous mode [ 130.247996][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.263743][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.299524][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.325163][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.346083][ T70] veth1_macvtap: left promiscuous mode [ 130.361068][ T70] veth0_macvtap: left promiscuous mode [ 130.372538][ T70] veth1_vlan: left promiscuous mode [ 130.382958][ T70] veth0_vlan: left promiscuous mode [ 130.539063][ T70] team0 (unregistering): Port device team_slave_1 removed [ 130.549318][ T70] team0 (unregistering): Port device team_slave_0 removed [ 130.605017][ T9075] netlink: 'syz.4.1574': attribute type 27 has an invalid length. [ 130.649620][ T9075] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.656904][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.698218][ T9075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.709788][ T9075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.780399][ T9063] 8021q: adding VLAN 0 to HW filter on device .` [ 130.810045][ T9063] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.833966][ T9063] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.853558][ T41] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.863842][ T41] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.873394][ T41] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.882681][ T41] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.897722][ T41] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.907545][ T41] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.921785][ T41] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.932984][ T41] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.972731][ T9085] netlink: 1304 bytes leftover after parsing attributes in process `syz.0.1580'. [ 131.011098][ T8993] chnl_net:caif_netlink_parms(): no params data found [ 131.119841][ T8993] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.127278][ T8993] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.134757][ T8993] bridge_slave_0: entered allmulticast mode [ 131.141689][ T8993] bridge_slave_0: entered promiscuous mode [ 131.148787][ T8993] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.156039][ T8993] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.163487][ T8993] bridge_slave_1: entered allmulticast mode [ 131.170382][ T8993] bridge_slave_1: entered promiscuous mode [ 131.196044][ T8993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.207616][ T8993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.238771][ T8993] team0: Port device team_slave_0 added [ 131.253755][ T8993] team0: Port device team_slave_1 added [ 131.291809][ T8993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.309074][ T8993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.354880][ T8993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.389095][ T8993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.398894][ T8993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.426896][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 131.426913][ T28] audit: type=1400 audit(1771356212.593:764): avc: denied { watch } for pid=9123 comm="syz.6.1583" path=2F6D656D66643A5217084B8558A31BC7701310A846B42E27198BE2D8F8A2317B2E3B3017110A8DFAA8051BDD2AF8F35F1AD14616884E23C2B11C05202864656C6574656429 dev="tmpfs" ino=1147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 131.476309][ T8993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.566931][ T8993] hsr_slave_0: entered promiscuous mode [ 131.579775][ T8993] hsr_slave_1: entered promiscuous mode [ 131.594385][ T8993] debugfs: 'hsr0' already exists in 'hsr' [ 131.600248][ T8993] Cannot create hsr debugfs directory [ 131.917555][ T9150] loop4: detected capacity change from 0 to 256 [ 131.993561][ T9150] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 132.004089][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1590'. [ 132.005394][ T9150] FAT-fs (loop4): Filesystem has been set read-only [ 132.014560][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1590'. [ 132.158746][ T9166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1595'. [ 132.244174][ T9188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1596'. [ 132.365176][ T8993] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 132.395964][ T28] audit: type=1400 audit(1771356213.563:765): avc: denied { bind } for pid=9208 comm="syz.0.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.431420][ T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.469439][ T8993] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 132.487337][ T8993] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 132.514966][ T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.536858][ T8993] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 132.568181][ T9168] chnl_net:caif_netlink_parms(): no params data found [ 132.590803][ T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.645594][ T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.731787][ T9168] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.740887][ T9168] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.748563][ T9168] bridge_slave_0: entered allmulticast mode [ 132.755594][ T9168] bridge_slave_0: entered promiscuous mode [ 132.762781][ T9168] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.769887][ T9168] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.777544][ T9168] bridge_slave_1: entered allmulticast mode [ 132.784305][ T9168] bridge_slave_1: entered promiscuous mode [ 132.846219][ T9168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.865804][ T8993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.881418][ T9168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.045187][ T41] bond0 (unregistering): Released all slaves [ 133.053464][ T41] bond1 (unregistering): Released all slaves [ 133.063707][ T9168] team0: Port device team_slave_0 added [ 133.071846][ T9168] team0: Port device team_slave_1 added [ 133.101787][ T41] tipc: Left network mode [ 133.107568][ T9168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.114956][ T9168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.164140][ T9168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.176347][ T8993] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.188761][ T9168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.195810][ T9168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.222131][ T9168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.235487][ T41] hsr_slave_0: left promiscuous mode [ 133.250902][ T41] hsr_slave_1: left promiscuous mode [ 133.265747][ T41] veth1_macvtap: left promiscuous mode [ 133.272562][ T41] veth0_macvtap: left promiscuous mode [ 133.278652][ T41] veth1_vlan: left promiscuous mode [ 133.284441][ T41] veth0_vlan: left promiscuous mode [ 133.463295][ T9285] syzkaller0: entered promiscuous mode [ 133.468787][ T9285] syzkaller0: entered allmulticast mode [ 133.483967][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.491049][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.532427][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.532799][ T9308] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 133.539599][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.556834][ T28] audit: type=1400 audit(1771356214.703:766): avc: denied { mac_admin } for pid=9307 comm="syz.0.1607" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 133.567205][ T9168] hsr_slave_0: entered promiscuous mode [ 133.580185][ T28] audit: type=1400 audit(1771356214.723:767): avc: denied { relabelto } for pid=9307 comm="syz.0.1607" name="385" dev="tmpfs" ino=2006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 133.609895][ T28] audit: type=1400 audit(1771356214.723:768): avc: denied { associate } for pid=9307 comm="syz.0.1607" name="385" dev="tmpfs" ino=2006 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 133.610830][ T9168] hsr_slave_1: entered promiscuous mode [ 133.644112][ T9168] debugfs: 'hsr0' already exists in 'hsr' [ 133.649854][ T9168] Cannot create hsr debugfs directory [ 133.687410][ T9310] syzkaller0: entered promiscuous mode [ 133.701169][ T28] audit: type=1400 audit(1771356214.863:769): avc: denied { remove_name } for pid=3314 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 133.728378][ T28] audit: type=1400 audit(1771356214.863:770): avc: denied { rmdir } for pid=3314 comm="syz-executor" name="385" dev="tmpfs" ino=2006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 133.847061][ T9168] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.880182][ T8993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.926972][ T9168] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.974254][ T9343] __nla_validate_parse: 2 callbacks suppressed [ 133.974271][ T9343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1614'. [ 133.974405][ T41] IPVS: stop unused estimator thread 0... [ 134.012844][ T9168] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.083076][ T9168] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.107167][ T9351] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1615'. [ 134.256287][ T9335] program syz.6.1612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.282259][ T8993] veth0_vlan: entered promiscuous mode [ 134.309739][ T8993] veth1_vlan: entered promiscuous mode [ 134.324674][ T9168] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 134.339578][ T9168] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 134.365188][ T9168] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 134.381378][ T8993] veth0_macvtap: entered promiscuous mode [ 134.396477][ T9168] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 134.428210][ T9379] netlink: 'syz.0.1619': attribute type 1 has an invalid length. [ 134.433550][ T8993] veth1_macvtap: entered promiscuous mode [ 134.517960][ T9379] bond4: (slave ip6gretap1): making interface the new active one [ 134.526385][ T9379] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 134.534531][ T9379] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 134.544433][ T9379] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 134.594590][ T8993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.633594][ T9396] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.649986][ T8993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.689203][ T9396] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 134.711957][ T9168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.725258][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.742638][ T83] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 134.794814][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.810164][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.842800][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.865180][ T9168] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.883402][ T83] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 134.897579][ T9419] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.1627'. [ 134.908685][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.915762][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.933308][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.940410][ T2927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.084050][ T9168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.276406][ T28] audit: type=1400 audit(1771356216.443:771): avc: denied { cmd } for pid=9471 comm="syz.8.1632" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=io_uring permissive=1 [ 135.295018][ T9168] veth0_vlan: entered promiscuous mode [ 135.312745][ T9168] veth1_vlan: entered promiscuous mode [ 135.339706][ T28] audit: type=1400 audit(1771356216.503:772): avc: denied { kexec_image_load } for pid=9476 comm="syz.8.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 135.361762][ T9168] veth0_macvtap: entered promiscuous mode [ 135.370641][ T9168] veth1_macvtap: entered promiscuous mode [ 135.383798][ T9168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.399323][ T9168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.420378][ T2927] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.436610][ T2927] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.454973][ T2927] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.472159][ T2927] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.643329][ T9487] loop8: detected capacity change from 0 to 1024 [ 135.663947][ T9487] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.699492][ T28] audit: type=1400 audit(1771356216.863:773): avc: denied { watch } for pid=9486 comm="syz.8.1636" path="/5/file1" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.732219][ T8993] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.912291][ T9511] netlink: 'syz.0.1645': attribute type 1 has an invalid length. [ 135.970308][ T9511] 8021q: adding VLAN 0 to HW filter on device bond5 [ 136.006551][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1648'. [ 136.017355][ T9513] 8021q: adding VLAN 0 to HW filter on device bond5 [ 136.027367][ T9513] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 136.039062][ T9513] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 136.053422][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1648'. [ 136.672598][ T3635] kernel read not supported for file /sysvipc/shm (pid: 3635 comm: kworker/0:7) [ 136.675963][ T9535] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 136.682113][ T28] audit: type=1400 audit(1771356217.843:774): avc: denied { create } for pid=9534 comm="syz.4.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 136.701623][ T9535] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 136.737630][ T28] audit: type=1400 audit(1771356217.843:775): avc: denied { write } for pid=9534 comm="syz.4.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 137.174634][ T9566] loop5: detected capacity change from 0 to 128 [ 137.253662][ T9570] pimreg: entered allmulticast mode [ 137.262461][ T9570] loop5: detected capacity change from 0 to 512 [ 137.270280][ T9570] EXT4-fs: Ignoring removed nobh option [ 137.290610][ T9570] EXT4-fs (loop5): orphan cleanup on readonly fs [ 137.301747][ T9570] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.1669: EA inode hash validation failed [ 137.315143][ T9570] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 137.328758][ T9570] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.1669: corrupted inode contents [ 137.345551][ T9570] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.345751][ T9570] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.1669: mark_inode_dirty error [ 137.354918][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 137.354938][ C0] EXT4-fs (loop5): initial error at time 1771356218: ext4_do_update_inode:5569: inode 15 [ 137.354965][ C0] EXT4-fs (loop5): last error at time 1771356218: ext4_do_update_inode:5569: inode 15 [ 137.462752][ T9570] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.463046][ T9570] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.1669: corrupted inode contents [ 137.527454][ T9570] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.527804][ T9570] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.1669: mark_inode_dirty error [ 137.654813][ T9570] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.655030][ T9570] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.1669: mark inode dirty (error -117) [ 137.707361][ T9570] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.707595][ T9570] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 137.756465][ T9570] EXT4-fs (loop5): 1 orphan inode deleted [ 137.772622][ T9570] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 137.884611][ T9168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.095963][ T9599] loop5: detected capacity change from 0 to 512 [ 138.114621][ T9599] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 138.154153][ T9599] EXT4-fs (loop5): orphan cleanup on readonly fs [ 138.175929][ T9599] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 138.218150][ T9599] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 138.269107][ T9599] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 138.284597][ T9599] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #16: comm syz.5.1682: inode has both inline data and extents flags [ 138.298172][ T9599] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 138.298471][ T9599] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1682: couldn't read orphan inode 16 (err -117) [ 138.307705][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 138.307726][ C1] EXT4-fs (loop5): initial error at time 1771356219: ext4_orphan_get:1391: inode 16 [ 138.307756][ C1] EXT4-fs (loop5): last error at time 1771356219: ext4_orphan_get:1391: inode 16 [ 138.313409][ T9610] netlink: 'syz.8.1687': attribute type 1 has an invalid length. [ 138.322398][ T9599] loop5: lost filesystem error report for type 5 error -117 [ 138.369393][ T9599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.521784][ T9625] netlink: 1304 bytes leftover after parsing attributes in process `syz.8.1691'. [ 138.871690][ T9168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.860820][ T9680] sctp: [Deprecated]: syz.5.1713 (pid 9680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.860820][ T9680] Use struct sctp_sack_info instead [ 140.204238][ T3636] IPVS: starting estimator thread 0... [ 140.292916][ T9720] IPVS: using max 2208 ests per chain, 110400 per kthread [ 140.715294][ T28] audit: type=1400 audit(1771356221.883:776): avc: denied { watch watch_reads } for pid=9817 comm="syz.6.1730" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 140.775608][ T9821] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1731'. [ 140.972441][ T28] audit: type=1400 audit(1771356222.123:777): avc: denied { associate } for pid=9830 comm="syz.6.1734" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 141.100691][ T9846] netlink: 'syz.4.1741': attribute type 1 has an invalid length. [ 141.126930][ T9846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.147252][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1741'. [ 141.163752][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1741'. [ 141.454588][ T9846] macsec1: entered promiscuous mode [ 141.459840][ T9846] bond0: entered promiscuous mode [ 141.482474][ T9846] macsec1: entered allmulticast mode [ 141.490447][ T9846] bond0: entered allmulticast mode [ 141.536697][ T9856] 9p: Bad value for 'rfdno' [ 141.599714][ T28] audit: type=1400 audit(1771356222.763:778): avc: denied { accept } for pid=9863 comm="syz.8.1749" path="socket:[28781]" dev="sockfs" ino=28781 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 141.638776][ T9865] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.1748'. [ 141.671674][ T9865] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1748'. [ 141.725260][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1752'. [ 141.755037][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1752'. [ 141.776269][ T9852] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1744'. [ 141.901089][ T9884] pimreg: entered allmulticast mode [ 141.911792][ T9884] loop4: detected capacity change from 0 to 512 [ 141.926216][ T9884] EXT4-fs: Ignoring removed nobh option [ 141.938222][ T9884] EXT4-fs (loop4): orphan cleanup on readonly fs [ 141.945429][ T9884] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.1766: EA inode hash validation failed [ 141.958392][ T9884] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.1766: corrupted inode contents [ 141.970631][ T9884] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 141.970878][ T9884] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.1766: mark_inode_dirty error [ 141.980063][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 141.980083][ C0] EXT4-fs (loop4): initial error at time 1771356223: ext4_do_update_inode:5569: inode 15 [ 141.980114][ C0] EXT4-fs (loop4): last error at time 1771356223: ext4_do_update_inode:5569: inode 15 [ 142.017457][ T9884] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 142.017789][ T9884] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.1766: corrupted inode contents [ 142.039231][ T9884] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 142.039463][ T9884] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.1766: mark_inode_dirty error [ 142.061359][ T9884] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 142.061595][ T9884] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.1766: mark inode dirty (error -117) [ 142.083503][ T9884] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 142.092659][ T9884] EXT4-fs (loop4): 1 orphan inode deleted [ 142.098871][ T9884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 142.163596][ T7719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.418612][ T9893] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1759'. [ 142.979254][ T9909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9909 comm=syz.0.1767 [ 142.992436][ T9909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=9909 comm=syz.0.1767 [ 142.998493][ T9911] loop5: detected capacity change from 0 to 512 [ 143.018090][ T9911] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 143.026388][ T9911] EXT4-fs (loop5): orphan cleanup on readonly fs [ 143.033629][ T9911] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 143.044637][ T9911] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 143.052038][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1767'. [ 143.067966][ T9911] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 143.075522][ T9911] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #16: comm syz.5.1765: inode has both inline data and extents flags [ 143.089652][ T9911] fserror_report: 1 callbacks suppressed [ 143.089665][ T9911] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 143.096004][ T9911] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1765: couldn't read orphan inode 16 (err -117) [ 143.105265][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 143.105286][ C1] EXT4-fs (loop5): initial error at time 1771356224: ext4_orphan_get:1391: inode 16 [ 143.105329][ C1] EXT4-fs (loop5): last error at time 1771356224: ext4_orphan_get:1391: inode 16 [ 143.142499][ T9911] loop5: lost filesystem error report for type 5 error -117 [ 143.144384][ T9911] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.152001][ T9917] loop6: detected capacity change from 0 to 1024 [ 143.170864][ T9917] EXT4-fs: inline encryption not supported [ 143.185674][ T9917] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.416832][ T3422] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 143.430002][ T9927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.438880][ T3422] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 143.451904][ T9927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.483616][ T9928] fido_id[9928]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 143.524963][ T9931] loop4: detected capacity change from 0 to 256 [ 143.546215][ T9168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.577776][ T3422] IPVS: starting estimator thread 0... [ 143.582914][ T9931] FAT-fs (loop4): Directory bread(block 64) failed [ 143.599014][ T9931] FAT-fs (loop4): Directory bread(block 65) failed [ 143.615884][ T9931] FAT-fs (loop4): Directory bread(block 66) failed [ 143.622579][ T9931] FAT-fs (loop4): Directory bread(block 67) failed [ 143.629245][ T9931] FAT-fs (loop4): Directory bread(block 68) failed [ 143.637583][ T9931] FAT-fs (loop4): Directory bread(block 69) failed [ 143.644315][ T9931] FAT-fs (loop4): Directory bread(block 70) failed [ 143.650928][ T9931] FAT-fs (loop4): Directory bread(block 71) failed [ 143.657796][ T9931] FAT-fs (loop4): Directory bread(block 72) failed [ 143.664804][ T9931] FAT-fs (loop4): Directory bread(block 73) failed [ 143.682392][ T9932] IPVS: using max 2400 ests per chain, 120000 per kthread [ 143.758533][ T9936] netlink: 'syz.8.1776': attribute type 1 has an invalid length. [ 143.780626][ T9936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.806682][ T9936] macsec1: entered promiscuous mode [ 143.817212][ T9936] bond1: entered promiscuous mode [ 143.825520][ T9936] macsec1: entered allmulticast mode [ 143.832511][ T9936] bond1: entered allmulticast mode [ 143.918379][ T7175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.276248][ T9780] IPVS: stop unused estimator thread 0... [ 144.541627][ T9985] pimreg: entered allmulticast mode [ 144.553932][ T9988] loop4: detected capacity change from 0 to 512 [ 144.567953][ T9985] loop6: detected capacity change from 0 to 512 [ 144.585315][ T9985] EXT4-fs: Ignoring removed nobh option [ 144.622708][ T9988] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 144.630839][ T9988] EXT4-fs (loop4): orphan cleanup on readonly fs [ 144.637631][ T9985] EXT4-fs (loop6): orphan cleanup on readonly fs [ 144.650115][ T9988] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 144.650163][ T9985] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.1797: EA inode hash validation failed [ 144.672413][ T9988] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 144.703431][ T9988] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 144.727655][ T9985] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.1797: corrupted inode contents [ 144.753701][ T9988] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.1807: inode has both inline data and extents flags [ 144.804950][ T9985] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 144.805133][ T9985] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #15: comm syz.6.1797: mark_inode_dirty error [ 144.814316][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 144.814341][ C1] EXT4-fs (loop6): initial error at time 1771356225: ext4_do_update_inode:5569: inode 15 [ 144.814373][ C1] EXT4-fs (loop6): last error at time 1771356225: ext4_do_update_inode:5569: inode 15 [ 144.892401][ T9988] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 144.902272][ T9988] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1807: couldn't read orphan inode 16 (err -117) [ 144.911472][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 144.911492][ C1] EXT4-fs (loop4): initial error at time 1771356226: ext4_orphan_get:1391: inode 16 [ 144.911528][ C1] EXT4-fs (loop4): last error at time 1771356226: ext4_orphan_get:1391: inode 16 [ 144.941899][ T9985] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 144.950820][ T9988] loop4: lost filesystem error report for type 5 error -117 [ 144.956825][ T9985] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.1797: corrupted inode contents [ 144.990803][ T9988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.011892][ T9985] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.016235][ T9985] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3001: inode #15: comm syz.6.1797: mark_inode_dirty error [ 145.122455][ T9985] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.122721][ T9985] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3004: inode #15: comm syz.6.1797: mark inode dirty (error -117) [ 145.167599][ T9985] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.169998][ T9985] EXT4-fs warning (device loop6): ext4_evict_inode:275: xattr delete (err -117) [ 145.213516][T10019] loop5: detected capacity change from 0 to 2048 [ 145.224980][ T9985] EXT4-fs (loop6): 1 orphan inode deleted [ 145.236223][ T9985] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 145.647067][ T7175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.009263][ T7719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.114959][T10060] loop4: detected capacity change from 0 to 128 [ 146.461818][T10096] netlink: 'syz.0.1833': attribute type 27 has an invalid length. [ 146.508426][T10096] sit3: left promiscuous mode [ 146.541132][ T28] audit: type=1326 audit(1771356227.703:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10103 comm="syz.5.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7433c629 code=0x7ffc0000 [ 146.549280][T10105] loop5: detected capacity change from 0 to 512 [ 146.608693][T10105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.612420][ T28] audit: type=1326 audit(1771356227.703:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10103 comm="syz.5.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7433c629 code=0x7ffc0000 [ 146.654463][ T28] audit: type=1326 audit(1771356227.703:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10103 comm="syz.5.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7433c629 code=0x7ffc0000 [ 146.656300][T10105] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.677981][ T28] audit: type=1326 audit(1771356227.703:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10103 comm="syz.5.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7433c629 code=0x7ffc0000 [ 146.678045][ T28] audit: type=1326 audit(1771356227.703:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10103 comm="syz.5.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7433c629 code=0x7ffc0000 [ 146.678065][ T28] audit: type=1326 audit(1771356227.703:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10103 comm="syz.5.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9a7433c629 code=0x7ffc0000 [ 146.678085][ T28] audit: type=1326 audit(1771356227.703:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10103 comm="syz.5.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7433c629 code=0x7ffc0000 [ 146.678111][ T28] audit: type=1326 audit(1771356227.703:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10103 comm="syz.5.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7433c629 code=0x7ffc0000 [ 146.713259][T10104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.833816][T10104] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.844391][T10104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.888988][ T9168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.102270][T10125] loop5: detected capacity change from 0 to 128 [ 147.235173][T10144] __nla_validate_parse: 2 callbacks suppressed [ 147.235189][T10144] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1836'. [ 147.689675][T10147] syz.5.1837 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 147.726360][T10147] CPU: 0 UID: 0 PID: 10147 Comm: syz.5.1837 Tainted: G W syzkaller #0 PREEMPT(full) [ 147.726395][T10147] Tainted: [W]=WARN [ 147.726403][T10147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 147.726416][T10147] Call Trace: [ 147.726423][T10147] [ 147.726431][T10147] __dump_stack+0x1d/0x30 [ 147.726472][T10147] dump_stack_lvl+0x95/0xd0 [ 147.726489][T10147] dump_stack+0x15/0x1b [ 147.726505][T10147] dump_header+0x80/0x240 [ 147.726524][T10147] oom_kill_process+0x295/0x350 [ 147.726589][T10147] out_of_memory+0x97d/0xb80 [ 147.726614][T10147] try_charge_memcg+0x62e/0xa10 [ 147.726675][T10147] __mem_cgroup_charge+0x65/0x150 [ 147.726761][T10147] shmem_get_folio_gfp+0x47b/0xd60 [ 147.726839][T10147] shmem_write_begin+0xfc/0x1f0 [ 147.726858][T10147] generic_perform_write+0x183/0x490 [ 147.726875][T10147] ? current_time+0x188/0x240 [ 147.726900][T10147] shmem_file_write_iter+0xc5/0xf0 [ 147.726984][T10147] __kernel_write_iter+0x319/0x590 [ 147.727105][T10147] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 147.727129][T10147] dump_user_range+0xa7d/0xdb0 [ 147.727154][T10147] elf_core_dump+0x21a2/0x2330 [ 147.727229][T10147] ? 0xffffffffff600000 [ 147.727325][T10147] coredump_write+0xacf/0xdf0 [ 147.727396][T10147] vfs_coredump+0x26c7/0x3130 [ 147.727423][T10147] ? __memcg_slab_free_hook+0xc4/0x250 [ 147.727443][T10147] ? __sigqueue_free+0xf4/0x130 [ 147.727537][T10147] ? proc_coredump_connector+0x160/0x2b0 [ 147.727619][T10147] ? __sigqueue_free+0xf4/0x130 [ 147.727641][T10147] ? kmem_cache_free+0xc8/0x380 [ 147.727717][T10147] get_signal+0xd80/0xf60 [ 147.727750][T10147] arch_do_signal_or_restart+0x96/0x450 [ 147.727781][T10147] irqentry_exit+0xf7/0x520 [ 147.727858][T10147] asm_exc_page_fault+0x26/0x30 [ 147.727923][T10147] RIP: 0033:0x7f9a741f2777 [ 147.727954][T10147] Code: e8 8e fa ff ff 89 f2 48 8d 3d 0d 41 1b 00 48 8d 35 94 f9 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 147.727969][T10147] RSP: 002b:00007f9a72d78120 EFLAGS: 00010202 [ 147.727987][T10147] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f9a7433c629 [ 147.728001][T10147] RDX: 00007f9a72d78140 RSI: 00007f9a72d78270 RDI: 000000000000000b [ 147.728014][T10147] RBP: 00007f9a743d2b39 R08: 0000000000000000 R09: 0000000000000000 [ 147.728040][T10147] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 147.728054][T10147] R13: 00007f9a745b6038 R14: 00007f9a745b5fa0 R15: 00007ffd3a6a4018 [ 147.728074][T10147] [ 147.994715][T10147] memory: usage 260136kB, limit 307200kB, failcnt 2459 [ 148.003355][T10147] memory+swap: usage 252684kB, limit 9007199254740988kB, failcnt 0 [ 148.011935][T10147] kmem: usage 224772kB, limit 9007199254740988kB, failcnt 0 [ 148.041258][T10147] Memory cgroup stats for /syz5: [ 148.041560][T10147] cache 4096 [ 148.058461][T10147] rss 49152 [ 148.061790][T10147] shmem 0 [ 148.077747][T10152] loop4: detected capacity change from 0 to 164 [ 148.088021][T10147] mapped_file 0 [ 148.093946][T10147] dirty 0 [ 148.110826][T10152] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 148.119854][T10147] writeback 0 [ 148.123784][T10147] workingset_refault_anon 2512 [ 148.128555][T10147] workingset_refault_file 49 [ 148.137346][T10147] swap 9916416 [ 148.146284][T10147] swapcached 15319040 [ 148.150501][T10147] pgpgin 80763 [ 148.154270][T10147] pgpgout 80734 [ 148.157820][T10147] pgfault 69946 [ 148.177410][T10152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1839'. [ 148.186657][T10147] pgmajfault 337 [ 148.190702][T10147] inactive_anon 40960 [ 148.204242][T10147] active_anon 65536 [ 148.208139][T10147] inactive_file 12288 [ 148.212187][T10147] active_file 0 [ 148.232363][T10147] unevictable 0 [ 148.235877][T10147] hierarchical_memory_limit 314572800 [ 148.241384][T10147] hierarchical_memsw_limit 9223372036854771712 [ 148.257685][T10147] total_cache 4096 [ 148.261425][T10147] total_rss 49152 [ 148.272344][T10147] total_shmem 0 [ 148.275826][T10147] total_mapped_file 0 [ 148.289981][T10147] total_dirty 0 [ 148.293711][T10147] total_writeback 0 [ 148.297565][T10147] total_workingset_refault_anon 2512 [ 148.303551][T10147] total_workingset_refault_file 49 [ 148.308727][T10147] total_swap 9916416 [ 148.314467][T10147] total_swapcached 15319040 [ 148.319025][T10147] total_pgpgin 80763 [ 148.323133][T10147] total_pgpgout 80734 [ 148.327128][T10147] total_pgfault 69946 [ 148.331257][T10147] total_pgmajfault 337 [ 148.335544][T10147] total_inactive_anon 40960 [ 148.340105][T10147] total_active_anon 65536 [ 148.344600][T10147] total_inactive_file 12288 [ 148.349232][T10147] total_active_file 0 [ 148.353366][T10147] total_unevictable 0 [ 148.357663][T10147] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1837,pid=10147,uid=0 [ 148.372667][T10147] Memory cgroup out of memory: Killed process 10147 (syz.5.1837) total-vm:94028kB, anon-rss:1224kB, file-rss:29952kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 148.631334][T10180] sctp: [Deprecated]: syz.8.1848 (pid 10180) Use of int in max_burst socket option. [ 148.631334][T10180] Use struct sctp_assoc_value instead [ 148.792223][T10163] chnl_net:caif_netlink_parms(): no params data found [ 148.916943][T10163] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.924151][T10163] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.931519][T10163] bridge_slave_0: entered allmulticast mode [ 148.938311][T10163] bridge_slave_0: entered promiscuous mode [ 148.954914][T10163] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.962451][T10163] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.969978][T10163] bridge_slave_1: entered allmulticast mode [ 148.976622][T10163] bridge_slave_1: entered promiscuous mode [ 149.022037][T10163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.054411][T10163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.086622][T10163] team0: Port device team_slave_0 added [ 149.107604][T10163] team0: Port device team_slave_1 added [ 149.129531][T10163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.136694][T10163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.163351][T10163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.195012][T10163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.222255][T10163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.279987][T10163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.310222][T10163] hsr_slave_0: entered promiscuous mode [ 149.319032][T10163] hsr_slave_1: entered promiscuous mode [ 149.325573][T10163] debugfs: 'hsr0' already exists in 'hsr' [ 149.331409][T10163] Cannot create hsr debugfs directory [ 149.450872][T10205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1866'. [ 149.517679][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 149.517694][ T28] audit: type=1400 audit(1771356230.683:831): avc: denied { create } for pid=10213 comm="syz.0.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 149.615330][T10217] loop4: detected capacity change from 0 to 512 [ 149.664852][T10217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.722466][T10217] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.807945][ T7719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.822596][T10163] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 149.848279][T10163] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 149.875633][T10163] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 149.902283][T10163] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 150.185243][T10163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.205733][ T3646] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 150.220511][T10163] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.227806][T10230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.243818][ T3646] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 150.262858][T10230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.296888][ T9792] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.304004][ T9792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.332793][ T9792] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.340030][ T9792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.380551][T10231] fido_id[10231]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 150.411845][T10163] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.462306][T10163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.632002][T10163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.665200][T10245] xt_hashlimit: size too large, truncated to 1048576 [ 150.804728][T10163] veth0_vlan: entered promiscuous mode [ 150.820422][T10163] veth1_vlan: entered promiscuous mode [ 150.889650][T10163] veth0_macvtap: entered promiscuous mode [ 150.899066][T10163] veth1_macvtap: entered promiscuous mode [ 150.915545][T10163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.923959][T10256] xt_hashlimit: size too large, truncated to 1048576 [ 150.951519][T10241] chnl_net:caif_netlink_parms(): no params data found [ 150.969301][T10163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.000208][ T9780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.009310][ T9780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.023258][ T9780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.032430][ T9780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.086381][T10241] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.094096][T10241] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.101529][T10241] bridge_slave_0: entered allmulticast mode [ 151.112218][T10241] bridge_slave_0: entered promiscuous mode [ 151.121973][T10241] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.129493][T10241] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.137109][T10241] bridge_slave_1: entered allmulticast mode [ 151.143776][T10241] bridge_slave_1: entered promiscuous mode [ 151.156809][T10282] netlink: 'syz.3.1841': attribute type 27 has an invalid length. [ 151.170976][T10241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.196009][T10282] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.203300][T10282] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.232920][T10282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.241691][T10282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.269024][T10241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.298285][T10287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.307130][T10287] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.317658][T10287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.320259][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1877'. [ 151.342657][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1877'. [ 151.356425][ T9784] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.365800][ T9784] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.393852][ T9784] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.402904][ T9784] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.421729][T10241] team0: Port device team_slave_0 added [ 151.429751][T10241] team0: Port device team_slave_1 added [ 151.452223][T10241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.460256][T10241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.487058][T10241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.499493][T10241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.506688][T10241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.533246][T10241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.573287][T10241] hsr_slave_0: entered promiscuous mode [ 151.579790][T10241] hsr_slave_1: entered promiscuous mode [ 151.586111][T10241] debugfs: 'hsr0' already exists in 'hsr' [ 151.592182][T10241] Cannot create hsr debugfs directory [ 151.620789][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1881'. [ 151.680696][T10301] xt_hashlimit: size too large, truncated to 1048576 [ 151.789631][T10302] xt_hashlimit: size too large, truncated to 1048576 [ 151.897993][T10241] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 151.914738][T10241] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 151.935233][T10241] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 151.944716][T10241] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 152.004755][T10319] netlink: 'syz.0.1886': attribute type 4 has an invalid length. [ 152.029223][T10319] netlink: 'syz.0.1886': attribute type 4 has an invalid length. [ 152.102610][T10241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.116759][T10241] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.176396][ T9780] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.183588][ T9780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.225883][ T9784] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.232973][ T9784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.278146][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1889'. [ 153.009687][T10241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.243232][T10241] veth0_vlan: entered promiscuous mode [ 153.271468][T10241] veth1_vlan: entered promiscuous mode [ 153.330726][T10241] veth0_macvtap: entered promiscuous mode [ 153.354257][T10241] veth1_macvtap: entered promiscuous mode [ 153.391904][T10365] syzkaller0: entered promiscuous mode [ 153.402422][T10365] syzkaller0: entered allmulticast mode [ 153.425933][T10241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.479587][T10241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.498075][ T9786] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.511768][ T9786] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.534089][ T9786] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.557869][ T9786] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.604633][ T28] audit: type=1400 audit(1771356490.778:832): avc: denied { read } for pid=10378 comm="syz.0.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 153.667863][T10381] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 153.712882][T10384] netlink: 'syz.7.1869': attribute type 4 has an invalid length. [ 153.735413][T10384] netlink: 'syz.7.1869': attribute type 4 has an invalid length. [ 154.246220][T10401] xt_hashlimit: size too large, truncated to 1048576 [ 154.381502][T10402] xt_hashlimit: size too large, truncated to 1048576 [ 155.076904][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1924'. [ 155.118123][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1924'. [ 155.410270][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1931'. [ 155.478548][T10450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.478731][T10452] xt_hashlimit: size too large, truncated to 1048576 [ 155.485801][T10450] IPv6: NLM_F_CREATE should be set when creating new route [ 155.528955][T10454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.536211][T10454] IPv6: NLM_F_CREATE should be set when creating new route [ 155.745432][ T28] audit: type=1400 audit(1771356492.918:833): avc: denied { bind } for pid=10457 comm="syz.5.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 155.839794][ T28] audit: type=1400 audit(1771356492.998:834): avc: denied { write } for pid=10459 comm="syz.7.1935" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 155.909162][T10453] xt_hashlimit: size too large, truncated to 1048576 [ 155.930345][T10463] netlink: 'syz.7.1937': attribute type 10 has an invalid length. [ 155.964837][ T28] audit: type=1400 audit(1771356492.998:835): avc: denied { ioctl } for pid=10459 comm="syz.7.1935" path="/dev/rtc0" dev="devtmpfs" ino=245 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 155.991457][T10463] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1937'. [ 156.041521][T10463] dummy0: entered promiscuous mode [ 156.063130][T10463] dummy0: entered allmulticast mode [ 156.092028][T10463] bridge0: port 3(dummy0) entered blocking state [ 156.121975][T10463] bridge0: port 3(dummy0) entered disabled state [ 156.153697][T10463] bridge0: port 3(dummy0) entered blocking state [ 156.160159][T10463] bridge0: port 3(dummy0) entered forwarding state [ 156.293625][ T28] audit: type=1400 audit(1771356493.468:836): avc: denied { ioctl } for pid=10471 comm="syz.7.1939" path="socket:[31925]" dev="sockfs" ino=31925 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.418639][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1942'. [ 156.781973][T10493] loop3: detected capacity change from 0 to 128 [ 156.932721][T10504] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 157.152240][T10516] loop3: detected capacity change from 0 to 1024 [ 157.169237][T10516] EXT4-fs: Ignoring removed orlov option [ 157.182768][T10516] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 157.223668][T10516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.275417][T10521] loop5: detected capacity change from 0 to 256 [ 157.387976][T10163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.667453][T10532] loop7: detected capacity change from 0 to 128 [ 157.970195][T10548] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.033881][T10548] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.096246][T10548] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.156752][T10548] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.234121][ T9786] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.258606][ T9784] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.287612][ T9790] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.300177][ T28] audit: type=1400 audit(1771356495.468:837): avc: denied { read write } for pid=10571 comm="syz.5.1979" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 158.323988][ T28] audit: type=1400 audit(1771356495.468:838): avc: denied { open } for pid=10571 comm="syz.5.1979" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 158.325231][T10570] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1978'. [ 158.361002][ T9790] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.892262][T10591] bond6: Removing last arp target with arp_interval on [ 158.909624][T10591] bond6: entered promiscuous mode [ 158.915856][T10591] bond6: entered allmulticast mode [ 158.925693][T10591] 8021q: adding VLAN 0 to HW filter on device bond6 [ 159.128547][T10605] loop7: detected capacity change from 0 to 512 [ 159.180369][T10605] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.235389][ T28] audit: type=1400 audit(1771356496.408:839): avc: denied { write } for pid=10610 comm="syz.3.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.364904][T10605] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.510720][T10629] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.589181][T10629] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.616435][T10241] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.668720][T10629] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.727953][T10629] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.789732][ T9796] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.810595][ T9796] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.864903][ T9792] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.883947][ T9792] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.213407][T10650] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.282938][T10650] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 160.290852][T10650] IPv6: NLM_F_CREATE should be set when creating new route [ 161.264221][T10701] netlink: 'syz.8.2019': attribute type 1 has an invalid length. [ 161.367035][T10701] bond2: entered promiscuous mode [ 161.372078][T10701] bond2: entered allmulticast mode [ 161.381982][T10701] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.412162][T10701] bridge2: entered promiscuous mode [ 161.427949][T10701] bridge2: entered allmulticast mode [ 161.434200][T10701] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 161.492523][ T9796] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 161.622453][ T9790] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 163.792418][T10756] bond3: Removing last arp target with arp_interval on [ 163.810351][T10756] bond3: entered promiscuous mode [ 163.816994][T10756] bond3: entered allmulticast mode [ 163.826018][T10756] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.375979][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2053'. [ 164.405404][T10767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2053'. [ 164.650287][T10790] IPv6: NLM_F_CREATE should be specified when creating new route [ 164.674282][T10790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.682337][T10790] IPv6: NLM_F_CREATE should be set when creating new route [ 165.625797][T10817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2063'. [ 165.649282][T10817] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2063'. [ 166.199518][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2072'. [ 166.502405][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2072'. [ 166.819839][T10846] loop3: detected capacity change from 0 to 1024 [ 166.964108][T10846] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 167.000418][T10846] System zones: 0-1, 3-36 [ 167.045727][T10846] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2073: bad orphan inode 134217728 [ 167.093596][T10846] loop3: lost filesystem error report for type 5 error -117 [ 167.111794][T10846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.411149][T10163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.422895][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2079'. [ 167.431962][T10865] geneve2: entered promiscuous mode [ 167.439907][ T9792] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 47465 - 0 [ 167.441943][ T28] audit: type=1400 audit(1771356504.608:840): avc: denied { ioctl } for pid=10870 comm="syz.7.2089" path="socket:[32835]" dev="sockfs" ino=32835 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.449164][ T9792] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 47465 - 0 [ 167.488904][T10868] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2079'. [ 167.520769][T10871] bridge0: port 3(dummy0) entered disabled state [ 167.527299][T10871] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.534563][T10871] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.605867][T10871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.620995][T10871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.699585][ T9792] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 47465 - 0 [ 167.736776][ T9792] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 47465 - 0 [ 167.763768][ T9792] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.773822][ T28] audit: type=1400 audit(1771356504.938:841): avc: denied { create } for pid=10887 comm="syz.3.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 167.797058][ T9792] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.812629][ T28] audit: type=1400 audit(1771356504.948:842): avc: denied { write } for pid=10887 comm="syz.3.2086" path="socket:[33803]" dev="sockfs" ino=33803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 167.839865][ T9792] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.863604][T10894] loop3: detected capacity change from 0 to 512 [ 167.881619][T10898] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2092'. [ 167.882477][ T9792] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.899279][T10894] EXT4-fs: inline encryption not supported [ 167.916134][T10894] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 168.255399][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2104'. [ 168.659304][T10944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.686571][T10944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.470769][T10953] loop5: detected capacity change from 0 to 512 [ 169.489748][T10953] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.508290][T10955] __nla_validate_parse: 1 callbacks suppressed [ 169.508306][T10955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2122'. [ 169.542369][T10955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2122'. [ 169.591018][T10953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.074696][ T9168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.087173][T10976] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2118'. [ 170.343235][ T28] audit: type=1400 audit(1771356507.508:843): avc: denied { lock } for pid=10985 comm="syz.0.2134" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 170.447180][T10982] loop3: detected capacity change from 0 to 1024 [ 170.463336][T10982] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 170.485364][T10982] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8800e019, mo2=0000] [ 170.524672][T10982] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 2: comm syz.3.2121: lblock 2 mapped to illegal pblock 2 (length 1) [ 170.581982][T10982] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 170.582122][T10982] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 170.591196][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 170.591222][ C1] EXT4-fs (loop3): initial error at time 1771356507: ext4_map_blocks:776: inode 3: block 2 [ 170.591258][ C1] EXT4-fs (loop3): last error at time 1771356507: ext4_map_blocks:776: inode 3: block 2 [ 170.701340][T10982] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 48: comm syz.3.2121: lblock 0 mapped to illegal pblock 48 (length 1) [ 170.745912][T10982] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 170.746070][T10982] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 170.812366][T10982] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.2121: Failed to acquire dquot type 0 [ 170.837451][T10982] loop3: lost filesystem error report for type 5 error -117 [ 170.861029][T10982] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 170.889773][T10982] loop3: lost filesystem error report for type 5 error -117 [ 170.890042][T10982] EXT4-fs error (device loop3): ext4_evict_inode:255: inode #11: comm syz.3.2121: mark_inode_dirty error [ 170.923775][T10982] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 170.923956][T10982] EXT4-fs warning (device loop3): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 171.012480][T10982] EXT4-fs (loop3): 1 orphan inode deleted [ 171.018740][T10982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.032488][ T83] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 171.056852][ T83] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 171.074285][ T83] EXT4-fs error (device loop3): ext4_release_dquot:7039: comm kworker/u8:5: Failed to release dquot type 0 [ 171.144911][T10163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.163292][T10163] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 171.192376][T10163] loop3: lost filesystem error report for type 5 error -117 [ 171.192558][T10163] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 171.210649][T10163] loop3: lost filesystem error report for type 5 error -117 [ 171.210815][T10163] EXT4-fs error (device loop3): ext4_quota_off:7287: inode #3: comm syz-executor: mark_inode_dirty error [ 171.230995][T10163] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 171.500120][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2127'. [ 171.523836][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2127'. [ 172.218457][ T28] audit: type=1400 audit(1771356509.388:844): avc: denied { setopt } for pid=11028 comm="syz.7.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 174.262730][T11085] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2152'. [ 174.274377][T11085] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2152'. [ 174.303982][T11084] geneve2: entered promiscuous mode [ 174.323701][ T9796] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 49528 - 0 [ 174.332037][ T9796] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 49528 - 0 [ 174.341860][ T9796] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 49528 - 0 [ 174.706504][ T9796] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 49528 - 0 [ 174.982221][T11106] loop3: detected capacity change from 0 to 512 [ 175.001032][T11106] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 175.018521][T11106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.002414][ T28] audit: type=1400 audit(1771356512.998:845): avc: denied { lock } for pid=11125 comm="syz.8.2166" path="socket:[34104]" dev="sockfs" ino=34104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 176.272663][T10163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.804453][T11145] geneve2: entered promiscuous mode [ 176.810894][ T9788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 43385 - 0 [ 176.822599][ T9788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 43385 - 0 [ 176.842047][ T9788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 43385 - 0 [ 176.851202][ T9788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 43385 - 0 [ 176.871069][T11143] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 177.199967][T11152] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 178.416489][ T28] audit: type=1400 audit(1771356515.588:846): avc: denied { module_load } for pid=11194 comm="syz.5.2193" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=34223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 178.463710][T11195] Invalid ELF header magic: != ELF [ 178.787130][T11204] netlink: 'syz.3.2196': attribute type 1 has an invalid length. [ 179.245826][T11209] bond1: Removing last arp target with arp_interval on [ 179.257948][T11209] bond1: entered promiscuous mode [ 179.263764][T11209] bond1: entered allmulticast mode [ 179.271428][T11209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.317717][T11255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2210'. [ 180.403182][T11265] netlink: 'syz.0.2222': attribute type 83 has an invalid length. [ 180.861084][T11268] bond1: Removing last arp target with arp_interval on [ 180.879947][T11268] bond1: entered promiscuous mode [ 180.886307][T11268] bond1: entered allmulticast mode [ 180.904303][T11268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.939736][T11273] ±ÿ: renamed from team_slave_1 (while UP) [ 181.292960][T11295] loop7: detected capacity change from 0 to 256 [ 181.316577][T11295] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 181.345577][T11295] FAT-fs (loop7): Filesystem has been set read-only [ 181.362229][T11295] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 181.383534][T11295] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 181.403961][T11295] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 181.423933][T11295] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 181.447423][T11295] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 181.487852][T11295] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 181.510359][T11295] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 181.552352][T11295] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 181.561269][T11295] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 182.225854][T11314] netlink: 'syz.5.2229': attribute type 1 has an invalid length. [ 182.251345][T11314] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.292120][T11314] bond1: (slave bridge3): making interface the new active one [ 182.321430][T11314] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 182.684617][T11331] netlink: 'syz.3.2234': attribute type 13 has an invalid length. [ 182.853316][T11332] loop3: detected capacity change from 0 to 512 [ 183.042630][T11332] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.2234: iget: bad extra_isize 90 (inode size 256) [ 183.158026][T11332] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 183.172328][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 183.187926][ C0] EXT4-fs (loop3): initial error at time 1771356520: ext4_xattr_inode_iget:441: inode 11 [ 183.197781][ C0] EXT4-fs (loop3): last error at time 1771356520: ext4_xattr_inode_iget:441: inode 11 [ 183.497918][T11332] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2234: error while reading EA inode 11 err=-117 [ 183.532379][T11332] loop3: lost filesystem error report for type 5 error -117 [ 183.532585][T11332] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 183.639487][T11332] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.2234: iget: bad extra_isize 90 (inode size 256) [ 183.704831][T11332] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 183.730666][T11332] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2234: error while reading EA inode 11 err=-117 [ 183.876288][T11332] loop3: lost filesystem error report for type 5 error -117 [ 183.876546][T11332] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.2234: iget: bad extra_isize 90 (inode size 256) [ 183.942674][T11332] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 183.943958][T11332] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2234: error while reading EA inode 18 err=-117 [ 184.012437][T11332] loop3: lost filesystem error report for type 5 error -117 [ 184.013734][T11332] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.2234: iget: bad extra_isize 90 (inode size 256) [ 184.075647][T11332] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 184.076310][T11332] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2234: error while reading EA inode 18 err=-117 [ 184.122625][T11332] loop3: lost filesystem error report for type 5 error -117 [ 184.132866][T11332] EXT4-fs (loop3): 1 orphan inode deleted [ 184.146318][T11338] bond2: Removing last arp target with arp_interval on [ 184.168584][T11338] bond2: entered promiscuous mode [ 184.172859][T11332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.174949][T11338] bond2: entered allmulticast mode [ 184.195917][T11338] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.236470][ T9784] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 43385 - 0 [ 184.252450][ T9784] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 43385 - 0 [ 184.261464][ T9784] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 43385 - 0 [ 184.282206][ T9784] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 43385 - 0 [ 184.374666][T10163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.485496][ T3487] IPVS: starting estimator thread 0... [ 184.592375][T11352] IPVS: using max 2256 ests per chain, 112800 per kthread [ 186.391204][T11386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2255'. [ 188.072248][T11428] tipc: Failed to remove unknown binding: 66,0,0/0:1976878571/1976878573 [ 188.082690][T11428] tipc: Failed to remove unknown binding: 66,0,0/0:1976878571/1976878572 [ 188.258687][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2272'. [ 188.572940][T11438] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.577186][ T3487] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 188.580241][T11438] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.598109][ T3487] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 188.829958][T11438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.850423][T11438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.923270][T11438] bond1: left allmulticast mode [ 188.934510][T11438] bond1: left promiscuous mode [ 188.968343][ T9780] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.982352][ T9780] netdevsim netdevsim8 eth0: unset [1, 1] type 2 family 0 port 49528 - 0 [ 189.008954][ T9780] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.019307][T11440] hid-generic 0000:0000:0000.0005: pid 11440 passed too large report [ 189.032352][ T9780] netdevsim netdevsim8 eth1: unset [1, 1] type 2 family 0 port 49528 - 0 [ 189.050993][ T9780] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.059573][ T9780] netdevsim netdevsim8 eth2: unset [1, 1] type 2 family 0 port 49528 - 0 [ 189.079812][ T9780] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.088393][ T9780] netdevsim netdevsim8 eth3: unset [1, 1] type 2 family 0 port 49528 - 0 [ 189.115632][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2276'. [ 189.252435][T11437] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 190.181156][T11471] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2283'. [ 190.190472][T11469] loop7: detected capacity change from 0 to 8192 [ 190.311346][ T28] audit: type=1326 audit(1771356527.478:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11474 comm="syz.8.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50490bc629 code=0x7ffc0000 [ 190.369152][ T28] audit: type=1326 audit(1771356527.478:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11474 comm="syz.8.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50490bc629 code=0x7ffc0000 [ 190.422239][ T28] audit: type=1326 audit(1771356527.478:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11474 comm="syz.8.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50490bc629 code=0x7ffc0000 [ 190.469275][ T28] audit: type=1326 audit(1771356527.478:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11474 comm="syz.8.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50490bc629 code=0x7ffc0000 [ 190.518393][ T28] audit: type=1326 audit(1771356527.508:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11474 comm="syz.8.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50490bc629 code=0x7ffc0000 [ 190.568217][ T28] audit: type=1326 audit(1771356527.508:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11474 comm="syz.8.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50490bc629 code=0x7ffc0000 [ 190.622240][ T28] audit: type=1326 audit(1771356527.508:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11474 comm="syz.8.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50490bc629 code=0x7ffc0000 [ 190.688989][ T28] audit: type=1326 audit(1771356527.508:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11474 comm="syz.8.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50490bc629 code=0x7ffc0000 [ 190.754571][ T28] audit: type=1326 audit(1771356527.508:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11474 comm="syz.8.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50490bc629 code=0x7ffc0000 [ 190.778502][ T28] audit: type=1326 audit(1771356527.508:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11474 comm="syz.8.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50490bc629 code=0x7ffc0000 [ 191.020047][T11503] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2296'. [ 191.170217][T11503] bond2: entered promiscuous mode [ 191.179847][T11503] bond2: entered allmulticast mode [ 191.192609][T11503] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.231076][T11503] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.241214][T11503] bond3: entered promiscuous mode [ 191.250489][T11503] bond3: entered allmulticast mode [ 191.257173][T11503] bond2: (slave bond3): Enslaving as an active interface with an up link [ 191.563827][T11522] netlink: 'syz.8.2311': attribute type 13 has an invalid length. [ 193.561295][T11558] loop5: detected capacity change from 0 to 2048 [ 193.594783][T11558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.648063][T11558] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.751755][T11565] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2312: bg 0: block 345: padding at end of block bitmap is not set [ 193.766318][T11565] EXT4-fs (loop5): Remounting filesystem read-only [ 193.775002][ T9796] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:5039: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 193.849782][ T9168] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.913994][T11567] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.942417][T11567] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 47465 - 0 [ 193.997083][T11567] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.017684][T11567] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 47465 - 0 [ 194.078320][T11567] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.089212][T11567] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 47465 - 0 [ 194.156160][T11567] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.167045][T11567] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 47465 - 0 [ 194.233740][ T9796] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 47465 - 0 [ 194.252741][ T9796] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 194.274346][ T9796] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 47465 - 0 [ 194.295890][ T9796] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 194.318847][ T9796] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 47465 - 0 [ 194.345390][ T9796] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 194.354632][ T9796] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 47465 - 0 [ 194.371971][ T9796] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 194.416127][T11584] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2321'. [ 194.430583][T11584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.455395][T11584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.470055][T11584] bond0 (unregistering): Released all slaves [ 195.547650][ T28] kauditd_printk_skb: 205 callbacks suppressed [ 195.547664][ T28] audit: type=1400 audit(1771356532.718:1062): avc: denied { read } for pid=11638 comm="syz.7.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 196.446375][ T28] audit: type=1326 audit(1771356533.618:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.8.2347" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50490bc629 code=0x0 [ 196.941445][T11671] netlink: 'syz.7.2351': attribute type 13 has an invalid length. [ 197.011054][T11672] loop7: detected capacity change from 0 to 512 [ 197.063115][T11672] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.2351: iget: bad extra_isize 90 (inode size 256) [ 197.099839][T11672] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 197.100137][T11672] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.2351: error while reading EA inode 11 err=-117 [ 197.109337][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 197.109357][ C0] EXT4-fs (loop7): initial error at time 1771356534: ext4_xattr_inode_iget:441: inode 11 [ 197.109391][ C0] EXT4-fs (loop7): last error at time 1771356534: ext4_xattr_inode_iget:441: inode 11 [ 197.155673][T11672] loop7: lost filesystem error report for type 5 error -117 [ 197.155911][T11672] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.2351: iget: bad extra_isize 90 (inode size 256) [ 197.186012][T11672] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 197.186244][T11672] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.2351: error while reading EA inode 11 err=-117 [ 197.216793][T11672] loop7: lost filesystem error report for type 5 error -117 [ 197.217016][T11672] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.2351: iget: bad extra_isize 90 (inode size 256) [ 197.252386][T11672] loop7: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 197.252578][T11672] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.2351: error while reading EA inode 18 err=-117 [ 197.292407][T11672] loop7: lost filesystem error report for type 5 error -117 [ 197.292762][T11672] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.2351: iget: bad extra_isize 90 (inode size 256) [ 197.322383][T11672] loop7: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 197.322604][T11672] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.2351: error while reading EA inode 18 err=-117 [ 197.352401][T11672] loop7: lost filesystem error report for type 5 error -117 [ 197.352663][T11672] EXT4-fs (loop7): 1 orphan inode deleted [ 197.376358][T11672] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.484000][T10241] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.581639][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2367'. [ 198.595592][T11688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.610224][T11688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.918058][T11728] netlink: 'syz.0.2365': attribute type 13 has an invalid length. [ 201.158785][ T2] ================================================================== [ 201.166897][ T2] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 201.173914][ T2] [ 201.176222][ T2] write to 0xffff888100232698 of 8 bytes by task 11810 on cpu 0: [ 201.183924][ T2] release_task+0x76f/0xb60 [ 201.188422][ T2] do_exit+0xd5c/0x15a0 [ 201.192569][ T2] kthread_exit+0x93/0x190 [ 201.196979][ T2] kthread+0xbd/0x280 [ 201.200948][ T2] ret_from_fork+0x150/0x360 [ 201.205534][ T2] ret_from_fork_asm+0x1a/0x30 [ 201.210290][ T2] [ 201.212599][ T2] read to 0xffff888100232100 of 3264 bytes by task 2 on cpu 1: [ 201.220127][ T2] memcpy_and_pad+0x48/0x80 [ 201.224619][ T2] arch_dup_task_struct+0x2c/0x40 [ 201.229637][ T2] dup_task_struct+0x6e/0x940 [ 201.234307][ T2] copy_process+0x37e/0x20d0 [ 201.238885][ T2] kernel_clone+0x16b/0x5d0 [ 201.243382][ T2] kernel_thread+0xe5/0x120 [ 201.247885][ T2] kthreadd+0x25b/0x320 [ 201.252034][ T2] ret_from_fork+0x150/0x360 [ 201.256619][ T2] ret_from_fork_asm+0x1a/0x30 [ 201.261375][ T2] [ 201.263684][ T2] Reported by Kernel Concurrency Sanitizer on: [ 201.269823][ T2] CPU: 1 UID: 0 PID: 2 Comm: kthreadd Tainted: G W syzkaller #0 PREEMPT(full) [ 201.280235][ T2] Tainted: [W]=WARN [ 201.284027][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 201.294158][ T2] ==================================================================